Exposed Erlang Cookie Leading to RCE

This repository contains a single Metasploit module: 'Erlang Port Mapper Daemon Cookie RCE' (modules/exploits/multi/misc/erlang_cookie_rce.rb). The module exploits the Erlang Port Mapper Daemon (EPMD) when the attacker knows the authentication cookie (typically stored in the '.erlang.cookie' file). By authenticating as a trusted node, the attacker can execute arbitrary commands on the target system. The exploit supports multiple platforms (Unix, Linux, Windows) and can deliver various Metasploit payloads, such as reverse shells or user creation. The main attack vector is network-based, targeting TCP port 25672. The exploit is weaponized, as it is part of the Metasploit framework and supports customizable payloads. The only fingerprintable endpoints are the EPMD TCP port (25672) and the '.erlang.cookie' file used for authentication.